CVE-2016-3625
Fixed in a distro release EPSS 2%
tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.2 | tiff | 4.0.7-r0 |
| Alpine 3.3 | tiff | 4.0.7-r0 |
| Alpine 3.4 | tiff | 4.0.7-r0 |
| Arch Linux | lib32-libtiff | 4.0.7-1 |
| Arch Linux | libtiff | 4.0.7-1 |
| Debian 12 | tiff | 4.0.3-1 |
| Debian 13 | tiff | 4.0.3-1 |
| Debian 14 | tiff | 4.0.3-1 |
| Ubuntu Pro 14.04 LTS | tiff | no fix |
| Ubuntu Pro 16.04 LTS | tiff | no fix |